Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          rdhwt1GbsW/o56rsvRjQjmWUQajY0lfm18hkpP3ux40=
Subject key identifier:   93:84:14:31:C3:80:41:C9:EF:FF:75:AB:C8:20:66:EF:B7:1E:49:64
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       019E1E6CB2820E14D24F00B6F6CD33D59554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 23:01:40 +0000
Manifest this update:     Tue 12 May 2026 23:01:40 +0000
Manifest next update:     Wed 13 May 2026 23:01:40 +0000
Files and hashes:         1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
                          4: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (hash: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ=)
                          5: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
                          6: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: 5n3awT7mSaW0hWQbR43BjCvNMpvbqzBLmLgare+WDgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:b2:82:0e:14:d2:4f:00:b6:f6:cd:33:d5:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: May 12 23:01:40 2026 GMT
            Not After : May 13 23:01:40 2026 GMT
        Subject: CN=93841431c38041c9efff75abc82066efb71e4964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:4b:bf:c1:24:ca:7e:0a:24:9f:92:b0:11:
                    d1:fa:57:5c:84:02:6c:02:32:80:b2:e2:81:c9:41:
                    dc:2c:ea:9f:48:0d:88:00:f8:6b:71:f8:63:d3:5a:
                    c3:25:21:55:d2:a6:4c:09:cf:40:2d:27:99:de:b7:
                    5c:0b:2a:73:1c:5b:20:67:67:94:c4:70:e3:2a:6e:
                    7c:79:74:50:b6:3f:19:7d:a4:fe:fe:a6:ec:81:d6:
                    4f:38:25:23:95:a2:53:df:1f:93:b1:cc:0f:ee:20:
                    8b:f8:55:ba:79:2e:24:14:9f:d5:c2:f1:39:a0:42:
                    c2:8c:95:db:c9:56:c0:6f:eb:52:33:ea:60:ed:a2:
                    02:f8:4c:70:72:10:61:36:aa:dc:ab:6b:48:05:0b:
                    52:2d:4b:13:79:16:0b:45:8d:5d:c7:f0:41:42:61:
                    90:38:42:98:41:af:e8:b4:57:19:6a:e1:35:f9:e1:
                    37:4d:cd:41:f8:fa:86:d1:a4:cf:1f:22:b7:22:2d:
                    15:ef:9e:e0:b5:d7:8d:64:f9:a5:78:cd:8e:ac:27:
                    a0:af:d1:a1:61:56:26:f5:2e:7c:52:7d:d1:17:6f:
                    1c:ab:10:ef:e8:e8:c3:18:91:1e:e5:3a:fb:3b:ad:
                    d5:8b:98:75:1c:29:4b:de:94:23:7b:3e:2d:ab:0b:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:14:31:C3:80:41:C9:EF:FF:75:AB:C8:20:66:EF:B7:1E:49:64
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:43:cb:68:83:d6:12:ad:3e:da:27:73:9d:f5:c0:25:49:
         a2:f0:89:6e:83:cf:4c:4f:d6:7a:a4:c3:6c:04:ff:d0:75:c0:
         ab:85:19:dc:31:ea:fa:ee:1f:a4:bb:1c:73:d9:46:fe:c6:8e:
         61:3c:a9:79:a8:44:30:63:ab:e5:70:30:eb:5a:30:5c:2f:77:
         3f:bd:dd:5d:3c:38:ec:ee:93:89:30:71:75:93:17:37:57:6d:
         92:80:57:e4:2a:b2:b6:45:4a:1c:35:d9:db:0b:05:85:b2:29:
         7a:67:43:2f:93:da:25:40:27:1c:5f:d9:b9:62:4a:1b:41:0d:
         75:30:c9:fa:f3:42:a2:01:db:1b:99:53:15:94:14:24:17:c9:
         6b:66:c2:78:51:2c:af:24:66:cb:f9:a8:c8:0a:7c:2f:73:21:
         a5:f5:f7:0b:39:9e:33:b0:7d:16:60:46:fe:dd:ac:70:8b:4a:
         c2:5f:b5:11:b6:e9:b3:6f:80:8d:ff:10:16:27:36:81:ba:6a:
         70:1b:23:06:a9:fd:78:0e:77:d3:d9:44:5c:91:16:9f:7c:31:
         7c:78:f5:3d:a0:0d:02:37:4c:25:11:03:f6:47:ce:66:8b:c4:
         1c:78:00:4a:ad:de:2b:0e:05:02:7d:c4:c9:86:8b:30:46:b7:
         45:7e:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:28 2026 by rpki-client